157
DCS-3950 series Ethernet switch manual
9.2.2.8 vlan ingress enable
Command: vlan ingress enable
no vlan ingress enable
Function: Enable the ingress rull for the VLAN, If no is put in front of the command,
ingress rull well be disabled.
Command mode: Port Mode.
Default: The ingress rule is disabled by default.
Usage Guide: If the ingress rule for the VLAN is enabled, the switch will check for each
frame for the VLAN membership. If the port from which the frame comes belongs to the
VLAN, the frame will be received and forwarded. Otherwise, it will be dropped.
Example: Enable the ingress rule for the port.
Switch(Config-Ethernet0/0/1)# vlan ingress enable
9.2.2.9 private-vlan
Command: private-vlan {primary|isolated|community}
no private-vlan
Function: Configure the current VLAN as Private VLAN, If no is put in front of this
command, Private VLAN configuration will be removed.
Parameters: primary is to set current VLAN as Primary VLAN, isolated is to set current
VLAN as Isolated VLAN. community is to set current VLAN as Community VLAN.
Command mode: VLAN configuration mode.
Default: Private VLAN configuration is not enabled by default.
Usage Guide: Only VLANs containing empty Ethernet ports can be set to Private VLAN,
and only the Private VLANs configured with associated private relationships can set the
Access Ethernet ports their member ports. Normal VLAN will clear its Ethernet ports when
set to Private VLAN.
It is to be noted Private VLAN messages will not be transmitted by GVRP.
Example: Set VLAN100 as primary, VLAN200 as isolated, and VLAN300 as community.
Switch(Config)#vlan 100
Switch(Config-Vlan100)#private-vlan primary
Switch(Config-Vlan100)#exit
Switch(Config)#vlan 200
Switch(Config-Vlan200)#private-vlan isolated
Switch(Config-Vlan200)#exit
Switch(Config)#vlan 300
Switch(Config-Vlan300)#private-vlan community
Switch(Config-Vlan300)#exit
9.2.2.10 private-vlan association
Command: private-vlan association <secondary-vlan-list>
no private-vlan association